On Wed, 15 Feb 2017, ellanios82 wrote:
> Hello List ,
>
>
> scanning my Thunderbird directory , am getting :
>
> /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus:
> Heuristics.Phishing.Email.SpoofedDomain FOUND
> /home/user/.thunderbird/9i9wirek.default/Mail/pop.gmail.com/bus: copied to
> '/var/log/clams.infected/bus'
>
>
> How please do i locate the offending message to delete, as i do not want to
> delete the entire directory ?
It's likely a message from this mailinglist:
My spam/virus fileter rejected a messeage from this list:
Timestamp: Feb 15 17:50:33 (UTC +1)
Size: 1365308
Subject: Re: [clamav-users] clamdscan mail file
Message-ID: 43291D57DEB83042A250562D597FDBDA477C0EED@PC1WEPSIEXDAG02
Status: Rejecting because of virus
Heuristics.Phishing.Email.SpoofedDomain
The timestamp is not the "Date:" header from the message but the
time of the delivery attempt at my mail server.
Looks like this was the message that Reindl Harald replied to
with his last message in the thread: "clamdscan mail file".
This should be sufficient information to locate the message.
Regards,
Kees Theunissen.
--
Kees Theunissen, System and network manager, Tel: +31 (0)40-3334724
Dutch Institute For Fundamental Energy Research (DIFFER)
e-mail address: c.j.theunis...@differ.nl
postal address: PO Box 6336, 5600 HH, Eindhoven, the Netherlands
visitors address: De Zaale 20, 5612 AJ, Eindhoven, the Netherlands
_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
